W32.Netsky.C@mm
Discovered on: February 24, 2004
Last Updated on: February 25, 2004 12:09:24 PM
W32.Netsky.C is a mass-mailing worm that uses its own SMTP engine to send itself to the email addresses it finds when scanning hard drives and mapped drives. This worm also searches drives C through Z for the folder names containing "Shar" and then copies itself to those folders.
The Subject, Body, and email attachment vary.
--------------------------------------------------------------------------------
Notes:
Symantec Consumer products that support Worm Blocking functionality automatically detect this threat as it attempts to spread.
Rapid Release virus definitions version 2/24/04 rev 32 (60224af or 20040224.032) and greater detect this threat.
Symantec Security Response has developed a removal tool to clean the infections of W32.Netsky.C@mm.
--------------------------------------------------------------------------------
Also Known As: W32/Netsky.c@MM [McAfee], Win32.Netsky.C [Computer Associates], W32/Netsky-C [Sophos], WORM_NETSKY.C [Trend]
Type: Worm
Infection Length: 25,352 bytes
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP
Systems Not Affected: DOS, Linux, Macintosh, OS/2, UNIX, Windows 3.x